Conversation

Notices

1. Embed this notice
   BrianKrebs (briankrebs@infosec.exchange)'s status on Wednesday, 19-Nov-2025 02:12:08 JST BrianKrebs

   Chatting with a friend about Cloudflare's intermittent outages today, they brought up an interesting point: How many organizations have started relying on Cloudflare to do basic security blocking and tackling stuff, like stopping SQL injection attacks at the edge? Maybe your devs were lazy at blocking this stuff in the past b/c CF was the control layer to compensate for that.

   You might say well okay but if CF is down, so are the sites relying on them, and that's true. But a lot of organizations will switch CF off during these times to keep their sites and services reachable and running. And my friend's point was that for those organizations, they might want to take a closer look at the traffic they received during this eight-hour outage window or whatever, and I think that's sound advice.

   • Embed this notice
     BrianKrebs (briankrebs@infosec.exchange)'s status on Wednesday, 19-Nov-2025 02:12:07 JST BrianKrebs

     in reply to

     Can someone please explain what this means?

     "A Cloudflare spokesperson said the "root cause" of the outage was an automatically generated configuration file used to manage threat traffic that "grew beyond an expected size of entries," which triggered a crash in the software system that handles traffic for several of its services."

     https://www.cnbc.com/2025/11/18/cloudflare-down-outage-traffic-spike-x-chatgpt.html

     Kim Scheinberg repeated this.
   • Embed this notice
     Adrian Cockcroft (adrianco@mastodon.social)'s status on Wednesday, 19-Nov-2025 04:09:35 JST Adrian Cockcroft

     in reply to

     @briankrebs I’d say that the root cause is propagating config files globally without staging them and verifying that they work, and rolling back changes that don’t work.

     Linux Walt Alt (@lnxw37a2) {3EB165E0-5BB1-45D2-9E7D-93B31821F864} likes this.
   • Embed this notice
     BrianKrebs (briankrebs@infosec.exchange)'s status on Wednesday, 19-Nov-2025 10:46:27 JST BrianKrebs

     in reply to

     Cloudflare just put up a blog post on today's incident.

     https://blog.cloudflare.com/18-november-2025-outage/